Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
File: 5eb06c17-6f04-3135-bc69-e990ab9b6737.roa (raw, json)
Hash identifier: F+xft5OHjSXUK6qXsSzasWlZL1ivyK6M0Ubla1qX5bA=
Subject key identifier: 3C:11:40:63:4C:C4:18:47:D9:36:5C:83:63:0D:DF:CE:A5:AF:FE:CF
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584832F040DC0AABF5B0254D5580
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 63199
IP address blocks: 148.153.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:40:dc:0a:ab:f5:b0:25:4d:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=e4313ab5-b45f-465a-9a10-2a4eea15f005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:ae:70:e4:3e:08:3a:00:23:c4:7a:14:d7:
6d:26:d6:a9:9a:f2:a8:3c:3e:f5:a1:52:ae:ff:9a:
2a:19:9c:73:11:a4:0a:ce:a8:5d:cc:3e:47:e2:84:
a1:56:59:d4:b9:4c:26:1e:55:d1:5c:c1:00:a8:0d:
67:5d:4d:d3:6a:6d:10:b6:57:75:95:c2:34:f9:32:
2d:64:21:f3:8d:fb:06:f0:b5:9f:df:17:a7:75:41:
95:dd:a9:a6:53:b0:56:73:8c:10:b5:93:81:14:55:
99:07:5a:30:b5:28:81:4b:19:03:4f:ec:21:ad:e3:
2e:7e:d1:4c:37:83:49:20:93:1d:78:45:d8:dd:2b:
69:dc:c4:72:38:f8:cf:a5:3e:9b:02:af:a0:c1:2a:
64:5a:8f:be:b9:1a:34:4c:37:fc:24:15:f9:28:84:
b0:03:7f:7b:0e:1a:1d:a2:36:27:0c:1a:27:4a:b0:
c6:6e:2b:55:ca:ce:dd:80:a4:4e:61:5f:ba:4a:5f:
86:57:6a:d1:a9:e9:28:0a:3d:ea:b9:b2:fc:8a:99:
a8:dd:75:2d:60:f4:dd:56:57:bc:80:fc:68:69:34:
7f:ee:22:5e:db:c4:93:0a:dd:9d:41:71:b0:c9:5e:
fb:9f:59:98:7f:23:a4:ac:57:99:4f:1f:61:61:90:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:40:63:4C:C4:18:47:D9:36:5C:83:63:0D:DF:CE:A5:AF:FE:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:26:cb:14:0c:99:54:5a:d2:58:ce:ea:e9:4b:c6:e4:e1:9a:
67:e9:83:0f:66:53:67:fa:29:bf:67:fb:89:7e:b5:54:6c:83:
01:c0:8e:a8:4e:89:58:b0:34:c4:08:2b:a0:1d:ec:25:fc:c4:
52:ad:a8:37:bb:83:87:78:6a:3e:de:1d:1a:db:34:88:83:6f:
06:f0:ea:66:7d:f9:10:ae:1a:f8:66:2f:4a:a8:29:1f:57:a8:
a8:9a:e3:cb:c5:fa:4d:3e:a0:89:46:95:bc:bb:c3:6a:37:24:
13:57:90:0e:5c:28:9f:4a:97:b0:e7:3f:4b:92:13:ff:77:d4:
f4:f1:c3:8e:ec:c0:ee:22:31:71:92:07:e6:c8:19:8a:ec:1a:
4c:d6:a9:9d:ed:6a:29:d4:7a:fd:a7:62:3f:18:51:18:6f:f3:
91:9e:00:d6:cc:8b:14:37:30:ca:c8:64:1f:ca:02:ac:ca:66:
ab:bb:5e:26:4f:01:ca:ba:e1:dc:91:00:6e:4c:2d:f6:bf:77:
36:62:43:90:32:71:ad:ed:8a:96:20:1f:68:13:4b:84:91:51:
0e:b8:d9:ac:c5:3e:3f:8c:83:c2:ee:73:4d:39:71:ce:4a:93:
c8:93:95:77:db:c2:d4:f3:88:62:a5:37:79:d0:05:e9:09:62:
84:0c:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:43 2025 by rpki-client